46a143b30b7e59e192aa31bf73a0ec58

General

Target

46a143b30b7e59e192aa31bf73a0ec58
Size

22KB
MD5

46a143b30b7e59e192aa31bf73a0ec58
SHA1

d0e4b49494d528854450067523ea29038b0520ae
SHA256

8dc7f2da53d0154b94bb9616ac4ba56901fb77bc59f9b8ac27e662358f1659ad
SHA512

d0bf7252e619934958cf30f2c145c7f42f8b13650e966eb5c8fa909243c1c6abe44a021a34ab402bb17b260d64c11171c04a04a2445a089bd5d69a9713611798
SSDEEP

384:e2SYH6OllBVSM0qKcTPZlYBCJVKJlc6MRRBcGH7dpsvzsqNphRB:R6OPBV28NlNxcAdpK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a143b30b7e59e192aa31bf73a0ec58

Files

46a143b30b7e59e192aa31bf73a0ec58
.dll windows:4 windows x86 arch:x86

d195807e34d34bbe9306332d68059d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
ReadFile
GetFileSize
CreateFileA
GetPrivateProfileStringA
SetFilePointer
GetProcAddress
OutputDebugStringA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
VirtualQueryEx
ReadProcessMemory
GetFileAttributesW
CloseHandle
GetTempPathA
GetCurrentProcessId
OpenProcess
TerminateProcess
GetCurrentProcess
Sleep
LoadLibraryA

user32

wsprintfA
GetWindow
GetClassNameW

wininet

InternetCloseHandle

msvcrt

free
strcpy
memset
malloc
strcat
sprintf
strlen
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
mbstowcs
_stricmp
strrchr
isprint
strncpy
strstr
_except_handler3
wcslen
wcsncat
wcscpy
wcsstr
exit
printf
strchr
strcmp
memcpy
fclose
fopen
_vsnprintf
_strcmpi
_strupr

gdiplus

GdipSaveImageToFile
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipDisposeImage
GdipGetImageEncodersSize

gdi32

BitBlt
DeleteObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
DeleteDC
GetDeviceCaps
CreateDCA

wsock32

closesocket
WSAGetLastError

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d195807e34d34bbe9306332d68059d6a

Headers

File Characteristics

Imports

kernel32

user32

wininet

msvcrt

gdiplus

gdi32

wsock32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB